IdExchange 1.9.1

Installing HID Safe Synchronization Modules

Installation Requirements

  1. Read permissions to the external database CyberArmedPersonView

  2. Client certificate to the IDMS Web API

  3. Role assignment of enrollmentOfficer within the IDMS WebApi

  4. Update permissions to the IDMS database

Before Installation Check List

 

Step Number

Procedure 

1

Log in to the database server where the CYBERARMEDPERSONVIEW resides. Verify the table is installed and matches the design schema.

2

Verify the certificate that has been enrolled into IDMS can be accessed via the pfx password.

 

Service Installation Steps

Data Star monitor

Step Number 

Procedure 

 Example

1

In the install folder, locate the DataStarServiceSetup.

image2016-10-28 14:44:8.png

2

Run the DataStarServiceSetup installer.

image2016-10-28 14:44:33.png

3

Open a command prompt as administrator and go to the folder: [C:\Program Files (x86)\CyberArmed\IDMSSvc].

image2016-10-28 14:49:35.png

4

Run the DataStarConfigurationManager command.

image2016-10-28 14:50:7.png

5

Enter the configurations for the View table and the WebApi.

image2016-10-28 14:50:36.png

6

After completing the information, press Save.

image2016-10-28 14:51:38.png

7

Start the DataStarService by typing net start datastarservice.

image2016-10-28 14:52:15.png

 

 

 

The steps below will perform an initial installation of the service

Step Number

 Procedure

 Example

1

Run the IDMSSvcInstaller installer.

image2016-9-6 13:21:3.png

2

Open a command prompt as administrator.

3

Verify the installation was successful by analyzing the command window. If successful, the command window will state "The commit phase completed successfully"

image2016-9-14 9:9:31.png

 

 

Configuration Procedures

IDMS SVC

The steps below provide the instructions for configuration for the service

 

Step Number

 Procedure

 Example

1

In the command prompt, Go to the C:\Program Files (x86)\CyberArmed\IDMSSvc folder

2

Open the IDMSSvc.exe.config with notepad.

image2016-9-14 9:28:16.png

3

With the IDMSSvc.exe.config opened, scroll to the bottom to the "AppSettings" section of the file.

image2016-9-14 10:4:59.png

4

Go to the "ViewDb" Section and add the connection string to the CYBERARMEDPERSONVIEW table.

image2016-9-14 10:6:24.png

5

Go to the "SafeDb" Section and add the connection string to the IDMS database.

image2016-9-14 10:7:2.png

6

Go to the IDMSSafeSynchAuditDb and add the connection string to the IDMS database.

image2016-9-14 10:7:43.png

7

Go to the PFXPathAndFileName and add the value to the PFX (the client certificate).

Go to the PFXFilePassword and add the value of the PFX Password.

image2016-9-14 10:8:18.png

8

Go to the WebAPIURL and add the value of the IDMS WebApit URL.

image2016-9-14 10:9:8.png

9

Save the file and close.

10

Go to the IDMS installation package and locate the RegisterSynchServiceSystems.sql file. If this not has already been executed, run this SQL file to add the system information to the IDMS.ChannelConfiguration table.

image2016-10-25 6:47:0.png

11

In the command prompt, enter net start IDMS.

image2016-9-14 10:17:5.png

12

View the logs to verify the service started properly.

13

Encrypt the configuration file

C:\> cd C:\IDMS\

cd C:\IDMS> ren IDMSSvc.exe.config web.config

aspnet_regiis.exe -pef "appSettings" "C:\CASL\Products\WcfService\Service\bin\Debug"

cd C:\IDMS> ren web.config IDMSSvc.exe.config

 

 

Verify the client.pfx file has been copied to the operating

1

SafeDb

The connection string required to connect to the external database

2

PollingIntervalInSeconds

The polling interval (in seconds) the SSM will query the external data source

3

PublishTablePurgeTime

The time in which the publishing table will be purged. 0100 is the default

4

PFXPathAndFileName

The pfx file required to log in to the IDMS Web API

5

PFXFilePassword

The pfx password

6

WebApiUrl

The IDMS Web API URL

 

 

 

Resetting failed user records

In the SAFE_P table, reset the record DBP_STATUS to "N". This will cause the service to reprocess the user.